Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File:                     vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier:          zdwId3YrmSwUmtzpKfR4M4RD2kLRfIi0uDP0NV3D53A=
Subject key identifier:   87:D3:78:AB:6C:49:F4:64:8A:85:1E:C0:D4:E4:C4:F3:F6:53:26:3C
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer:       /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial:       01A00213DED1D6066E53FEA1842821A31728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number:          08CE
Signing time:             Fri 14 Aug 2026 21:00:51 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:51 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:51 +0000
Files and hashes:         1: Ivg6snMydNXdySu3QX12mNo28u8.roa (hash: j9c4g1fOAHiMBPWaG5AigoutzfZxb4EuhkBYBF49VwY=)
                          2: i69vJEQPkDcWZtUI4FCC2gJOc0U.roa (hash: D7g5fdfmMlJvg4w+bYuZp2xJXQeTRhu8e3EybLceqmw=)
                          3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: GOxEGUbgTAvoGh8I0v9qnvIUXIoV6KdPon8u3Kug1CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:de:d1:d6:06:6e:53:fe:a1:84:28:21:a3:17:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
        Validity
            Not Before: Aug 14 21:00:51 2026 GMT
            Not After : Aug 15 21:00:51 2026 GMT
        Subject: CN=87d378ab6c49f4648a851ec0d4e4c4f3f653263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:e0:74:ab:1e:10:52:d8:9c:c8:47:b8:15:
                    86:5d:36:60:cd:e8:86:05:b0:fe:54:17:3a:02:f1:
                    1a:2a:32:8e:d2:c0:3f:1a:4a:d5:35:cd:df:72:82:
                    3c:7f:01:61:dc:d4:2a:db:4d:49:5b:69:86:24:23:
                    e5:fa:59:cd:77:08:f8:47:f7:ec:4e:77:45:22:e4:
                    01:b2:bc:19:7b:06:b7:fd:60:3e:77:e3:0a:bc:ca:
                    1c:3c:34:66:7d:a4:33:9c:43:04:6c:ae:d3:59:9c:
                    10:78:c3:65:b7:5a:e0:b7:77:90:27:fd:50:57:a3:
                    bf:09:60:5e:3c:ff:3b:52:4b:d7:8b:a3:d6:79:43:
                    ac:84:0d:a4:41:5d:a6:89:aa:f0:6a:ac:4b:da:b3:
                    a8:4a:fd:0b:5d:a3:fd:a5:25:d2:44:21:3c:f1:79:
                    1e:ff:ed:ae:78:99:26:f1:25:9e:6b:ba:2e:59:19:
                    c4:f0:c2:39:76:76:24:cb:9a:f1:c5:ad:54:cc:c6:
                    04:52:06:45:67:94:af:ff:17:b2:93:89:f9:39:eb:
                    4e:79:e1:e7:05:83:84:b1:6e:1d:25:59:d9:e1:c3:
                    d2:71:ab:12:9c:b3:eb:d1:4f:53:c6:0f:9c:4d:10:
                    ba:72:64:bd:cb:51:23:32:64:e4:28:46:98:64:3e:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D3:78:AB:6C:49:F4:64:8A:85:1E:C0:D4:E4:C4:F3:F6:53:26:3C
            X509v3 Authority Key Identifier:
                keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:27:f9:ec:6f:0d:dc:1a:d2:b1:82:67:12:69:31:41:2a:
         29:ad:af:39:40:ae:77:e7:58:04:b1:43:7f:39:89:a7:dd:fd:
         4e:1c:af:3f:1e:77:d8:56:68:1d:4c:cd:cf:4a:27:12:c0:33:
         9c:07:61:c5:a9:b2:f1:49:b8:22:b2:1a:00:82:ac:39:51:fe:
         e2:35:47:fb:4e:73:d8:f7:80:f8:b6:08:7f:44:98:f2:a3:70:
         79:09:fb:f8:c6:96:79:6b:e2:39:c5:73:5a:ea:6e:96:d6:12:
         ba:fb:f9:cd:dc:92:db:01:26:32:50:cb:6b:82:52:74:58:72:
         26:e4:a0:ef:62:70:9d:a9:54:73:97:d9:ea:d3:de:fa:4e:8c:
         10:d6:d4:fb:c8:46:d3:f4:10:76:b9:a0:99:f8:d9:a8:a8:2b:
         44:03:dc:3e:9d:b7:ce:ac:99:27:79:c0:27:d5:b2:53:c8:6c:
         fc:7b:50:4e:8d:8f:8c:29:08:bc:8f:1f:cd:10:e9:1a:2a:77:
         8d:56:f9:4e:2a:93:54:16:df:b7:01:26:53:73:c6:35:c5:fa:
         93:fc:4a:94:79:31:fd:c2:7f:77:dc:88:db:7b:f5:71:9e:85:
         05:03:74:47:cb:6d:4b:87:68:ea:88:0e:d2:66:13:1a:d1:68:
         fe:5c:ac:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE97R1gZuU/6hhCghoxcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjYwODE0MjEwMDUxWhcNMjYwODE1MjEwMDUxWjAzMTEwLwYDVQQD
Eyg4N2QzNzhhYjZjNDlmNDY0OGE4NTFlYzBkNGU0YzRmM2Y2NTMyNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql/gdKseEFLYnMhHuBWGXTZgzeiG
BbD+VBc6AvEaKjKO0sA/GkrVNc3fcoI8fwFh3NQq201JW2mGJCPl+lnNdwj4R/fs
TndFIuQBsrwZewa3/WA+d+MKvMocPDRmfaQznEMEbK7TWZwQeMNlt1rgt3eQJ/1Q
V6O/CWBePP87UkvXi6PWeUOshA2kQV2miarwaqxL2rOoSv0LXaP9pSXSRCE88Xke
/+2ueJkm8SWea7ouWRnE8MI5dnYky5rxxa1UzMYEUgZFZ5Sv/xeyk4n5OetOeeHn
BYOEsW4dJVnZ4cPScasSnLPr0U9Txg+cTRC6cmS9y1EjMmTkKEaYZD5bcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfTeKtsSfRkioUewNTkxPP2UyY8MB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa4n+exv
Ddwa0rGCZxJpMUEqKa2vOUCud+dYBLFDfzmJp939ThyvPx532FZoHUzNz0onEsAz
nAdhxamy8Um4IrIaAIKsOVH+4jVH+05z2PeA+LYIf0SY8qNweQn7+MaWeWviOcVz
WupultYSuvv5zdyS2wEmMlDLa4JSdFhyJuSg72JwnalUc5fZ6tPe+k6MENbU+8hG
0/QQdrmgmfjZqKgrRAPcPp23zqyZJ3nAJ9WyU8hs/HtQTo2PjCkIvI8fzRDpGip3
jVb5TiqTVBbftwEmU3PGNcX6k/xKlHkx/cJ/d9yI23v1cZ6FBQN0R8ttS4do6ogO
0mYTGtFo/lysqQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:05 2026 by rpki-client